rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ac526fb54d8ab0b19fc6bf253aeaa9cf1ca965bb
probo/CHANGELOG.archive.md
Bryan Frimin ac526fb54d Split release into per-track packages 
Each shippable artifact (prb, probod server group, probod-bootstrap,
@probo/n8n-nodes-probo, @probo/cookie-banner) now has its own version
file, its own CHANGELOG.md, its own annotated-tag scheme of the form
<track>/v<version>, and its own GitHub Actions release workflow. The
unified release.yaml is removed; the unified CHANGELOG.md becomes a
short index pointing at each per-track file, with the prior history
preserved in CHANGELOG.archive.md.

Probod's CHANGELOG carries the post-split monorepo releases (0.174.0
through 0.181.0) so the server-group history stays continuous and the
probod docker image keeps its existing version line.

contrib/claude/release.md is split into contrib/claude/release/ with
one entrypoint per track plus a README that drives the agent: detect
which tracks have user-facing commits since their last tag and skip
tracks with no relevant changes, so a release request never tags an
unchanged track. The cookie-banner and n8n-node entrypoints add an
explicit npm run build step after the version bump (build.mjs bakes
package.json's version into __SDK_VERSION__) so compile errors and
package-lock.json updates are caught before tagging.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-05-06 16:04:36 +02:00

3044 lines
54 KiB
Markdown
Raw Blame History

# Changelog Archive
This file preserves the unified monorepo changelog up to and including v0.173.0 (2026-04-24). After that release the project switched to per-track changelogs; see [CHANGELOG.md](CHANGELOG.md) for the index.
## [0.173.0] - 2026-04-24
### Added
- Add cookie banner internationalization with default translations for French, German, and Spanish
- Add Google Consent Mode v2 integration to cookie banner SDK and console
- Add PostHog consent integration and plugin system for cookie banner
- Add Global Privacy Control (GPC) support to cookie banner SDK
- Add vendor assessment agent
- Add background PDF generation for published document versions
- Add cookie banner deletion from overview page
- Add cookie policy URL field to cookie banners
- Add slug to cookie categories for stable consent identifiers
- Add banner ID to `probo_consent` cookie
- Add `probo_consent` cookie to necessary category on banner creation
- Add Google Workspace connector to bootstrap
- Surface domain provisioning errors to users
- Show SAML configuration ID in SSO settings
### Changed
- Make cookie banner origin immutable after creation
- Limit detected cookies to 100 per request in cookie banner SDK
- Constrain PostHog consent to one normal category per banner
- Move cookie detail labels and duration translations from backend to JS SDK
### Fixed
- Fix intrusive auto-focus on cookie banner initial load
- Gracefully handle config fetch failure in cookie banner SDK
## [0.172.1] - 2026-04-22
### Security
- Bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2
## [0.172.0] - 2026-04-22
### Added
- Add missing resources to CLI, MCP, and n8n surfaces
- Add cookie detection
- Update kit with new pg config
### Fixed
- Handle SCIM user email rename via external ID fallback
## [0.171.1] - 2026-04-22
### Fixed
- Add user external id in bridge logs
## [0.171.0] - 2026-04-22
### BREAKING CHANGES
- OAuth2/OpenID Connect authorization server requires a new `probod.auth.oauth2-server` config block with at least one signing key
### Added
- Add OAuth2/OpenID Connect authorization server with PKCE, device grant, dynamic client registration, introspection, and revocation
- Add cookie banner management UX with cookies catalog, categories, themed banner preview, and publishing workflow
- Add cookie banner web components, headless and themed SDK entrypoints, and settings link element
- Add approval quorum and decision read tools to MCP, CLI, and n8n
- Add global branding config to control cookie banner Probo branding by default
### Changed
- Replace implemented boolean column on controls with a CMMI maturity level
- Replace data snapshot export with document publish workflow
- Replace asset snapshot export with document publish workflow
- Prevent the last active owner of an organization from demoting themselves
- Deduplicate existing connectors and enforce per-organization uniqueness
### Fixed
- Fix SCIM bridge PUT loop and missing pagination
- Preserve reviewer decisions and notes on access-entry upsert
- Include inactive accounts in access-review fetch
- Always send Bearer auth for OAuth2 connectors regardless of returned token_type
### Security
- Mitigate SSRF on outbound HTTP client usage
- Replace non-constant-time string comparisons in secure cookie and secure token packages
- Bump langsmith and override @langchain/classic to fix GHSA-rr7j-v2q5-chgv
### Removed
- Remove meeting feature and related tables
## [0.170.0] - 2026-04-17
### Added
- Add @probo/cookie-banner SDK package scaffold
- Add webhook subscription MCP tools and N8N operations
### Fixed
- Preserve shared connector on SCIM disconnect
- Handle NotFound and NotPublished errors in document resolvers
## [0.169.1] - 2026-04-16
### Fixed
- Fix Profile email field in n8n-node GraphQL queries
## [0.169.0] - 2026-04-16
### Changed
- Add SOA as document: replace export/snapshot with publish workflow
## [0.168.2] - 2026-04-15
### Added
- Enforce unicity of draft/pending document version in DB
## [0.168.1] - 2026-04-15
### Added
- Add document filters to MCP and n8n APIs
### Fixed
- Filter people with ended contracts from signature request dialog
## [0.168.0] - 2026-04-15
### Fixed
- Align risk severity across views
- Set cookie secure flag to false in dev config
- Fix risk controls tab missing pagination
### Changed
- Split GraphQL schemas into per-entity files
- Consolidate document draft management into updateDocument
- Replace document properties drawer with inline details card
## [0.167.0] - 2026-04-14
### Added
- Add LLM model registry with OpenRouter auto-generation
- Improve connectors
## [0.166.0] - 2026-04-13
### Added
- Add membership and host to user webhook payload
- Add document resource to n8n node and MCP sendSigningNotifications tool
- Add document CLI commands
- Add CookieBanner service and models
### Fixed
- Fix missing fields in MCP type serializers
## [0.165.3] - 2026-04-10
### Fixed
- Fix MCP data owner serialization and document ordering
## [0.165.2] - 2026-04-10
### Fixed
- Fix MCP snapshot issues for SOA and vendors
### Changed
- Move document title ownership from document to version
## [0.165.1] - 2026-04-09
### Fixed
- Fix registration unavailable page for authenticated users
## [0.165.0] - 2026-04-09
### Fixed
- Show registration unavailable page when signup is disabled
### Changed
- Change document approval workflow
## [0.164.0] - 2026-04-09
### Fixed
- Fix famework_id filer
### Changed
- Rename State of Applicability to Statement of Applicability
- Validate document content length by extracted text, not JSON size
## [0.163.2] - 2026-04-08
### Added
- Add prosemirror markdown renderer for MCP document content tools
### Changed
- Connector OAuth2 refactor
## [0.163.1] - 2026-04-07
### Fixed
- Fix mcp task creation priority
## [0.163.0] - 2026-04-07
### Changed
- Improve list handling and backspace behavior in rich editor
## [0.162.1] - 2026-04-07
### Fixed
- Fix invisible drag line on Safari in rich editor
## [0.162.0] - 2026-04-06
### Added
- Add prosemirror markdown renderer for MCP document content tools
### Fixed
- Fix permission error for CD
## [0.161.2] - 2026-04-06
## [0.161.1] - 2026-04-06
### Fixed
- Fix measure ID missing for evidence dialog
## [0.161.0] - 2026-04-03
### Added
- Add measure-document linking
### Changed
- Sort employee signatures and approvals by most recently updated
- Remove no-changes guard from document version publish
- Exclude approved-without-signature documents from employee approvals
## [0.160.2] - 2026-04-03
### Fixed
- Fix SCIM sync
## [0.160.1] - 2026-04-03
### Fixed
- Fix OAuth connector redirect not requiring safe redirect for known providers
## [0.160.0] - 2026-04-03
### Added
- Add markdown copy-paste support in rich text editor
### Changed
- Update rich editor style to be lighter and closer to printed documents
## [0.159.0] - 2026-04-02
### Added
- Add access review
- Add in-progress state to tasks
### Fixed
- Allow logo to take doc width
## [0.158.0] - 2026-04-02
### Added
- Add task priority enum
- Add UNKNOWN and NOT_IMPLEMENTED measure states
- MCP takes markdown input for document version content
## [0.157.0] - 2026-04-01
### Added
- Add rich text editor for documents with TipTap (tables, links, mermaid diagrams, slash commands, auto-save)
Migration of existing documents should be done running `cmd/migrate-document-versions-markdown/main.go -pg-dsn <pg-dsn>`.
- Add prosemirror-based PDF rendering for documents
- Add migration command for document version markdown-to-prosemirror conversion
### Changed
- Remove version update dialog in favor of inline editing
### Fixed
- Fix create draft condition and delete draft connections handling
- Fix document creation request validation
## [0.156.1] - 2026-04-01
### Fixed
- Split employee document policy from core document actions
## [0.156.0] - 2026-03-31
### Changed
- Unify dropzone accept prop
### Added
- Add document classification filter
### Fixed
- Add session transfer for SSO cookies on custom domains
## [0.155.0] - 2026-03-31
### Added
- Add major.minor document versioning
### Fixed
- Fix compliance page login redirect to custom domains
## [0.154.2] - 2026-03-30
### Added
- Add reusable agent guardrails for prompt injection and data leaks
### Fixed
- Add ability to disconnect Slack channel from compliance page
## [0.154.1] - 2026-03-30
### Fixed
- Fix goreleaser snapshot
## [0.154.0] - 2026-03-30
### Added
- Add document approval workflow
- Add task priority
### Fixed
- Fix duplicate organization name returning internal error
- Distinguish expired magic links from invalid tokens
## [0.153.2] - 2026-03-26
### Fixed
- Mark failed evidence descriptions instead of retrying
## [0.153.1] - 2026-03-26
### Fixed
- Fix file MIME type lookup for evidence description generation
## [0.153.0] - 2026-03-26
### Added
- Add AI-powered evidence description generation
### Fixed
- Fix batch signature dialog wording
- Fix empty search_engine_indexing on trust centers
## [0.152.0] - 2026-03-25
### Added
- Add GraphQL dataloaders for batched record lookups
- Check CAA records before ACME certificate issuance
### Fixed
- Fix Microsoft OIDC token exchange auth style
- Fix SCIM bridge updating all users on every sync
- Fix ACME challenge retry to create fresh orders
## [0.151.0] - 2026-03-24
### Added
- Add SEO controls and sitemap for compliance pages
### Changed
- Allow editing non-SCIM fields on SCIM-managed profiles
## [0.150.0] - 2026-03-23
### Added
- Add OIDC login support for Google and Microsoft providers
- Add per-email sender name for compliance page emails
- Add audit log feature for recording all actions
## [0.149.0] - 2026-03-20
### Changed
- Use actual MIME type for trust center file exports
### Fixed
- Fix trust center SPA asset loading on custom domains
## [0.148.0] - 2026-03-20
### Added
- Add MCP audit report metadata and getAuditReportUrl tool
- Add Homebrew tap publishing for prb CLI
### Fixed
- Fix measure category filter not applying on initial page load
## [0.147.0] - 2026-03-20
### Added
- Add /llms.txt endpoint to trust center compliance page
- Add context page with organization context and meetings tabs
- Allow skipping confirmation email when adding mailing list subscribers
- Support developer-specific env vars in sandbox provisioning
### Changed
- Rename Vendor to Subprocessor in trust API surface
- Improve pagination performance for findings, obligations, and measures
### Fixed
- Fix unvalidated URL redirection in HTTP redirects
- Fix measure breadcrumb category filter
## [0.146.1] - 2026-03-19
### Fixed
- Fix SAML ACS endpoint CORS rejection
## [0.146.0] - 2026-03-19
### Added
- Add document archiving
- Add fulltext search to measures page
- Add document types filtering
### Changed
- Rename ISMS to GOVERNANCE
### Fixed
- Fix owner deletion by qualifying ambiguous tenant_id column
- Fix organization profile using owner's full name instead of org name
- Fix measure count queries missing category column
- Clamp pagination size
## [0.145.0] - 2026-03-19
### Added
- Add unified findings system with GraphQL, MCP, and CLI support
- Add PDF dropzone to audit list for streamlined report upload
- Add dynamic favicon for trust center
- Add SSR for compliance page with dynamic title and meta tags
- Add cross-origin protection for CSRF defense
- Add file visibility (PRIVATE/PUBLIC) and public files API
### Changed
- Rename NONCONFORMITY to MINOR_NONCONFORMITY and add MAJOR_NONCONFORMITY
### Fixed
- Fix race condition in magic link token verification
- Fix sandbox provisioning issues
- Fix CLI URL scheme handling with http:// addresses
- Fix NDA file display on page reload
- Fix audit report buttons visibility when no file attached
- Fix drag-and-drop issues in audit list dropzone
## [0.144.0] - 2026-03-17
### Added
- Add implemented state and justification to controls
- Add release guide documentation
- Add Lima sandbox environment for parallel feature testing
## [0.143.0] - 2026-03-16
### Added
- Add CLI
- Add validation to mailman service
### Fixed
- SCIM provisioning failure when enrolling existing manual users due to stale external_id conflicts
- SCIM reset not clearing external_id and user_name on profiles
## [0.142.2] - 2026-03-13
### Fixed
- Compliance page member provisioning for already signed in identities
- Compliage page request all callback redirection
## [0.142.1] - 2026-03-13
### Fixed
- Fix documents UI
- Fix refetch after publication
- Add nda warning to new compliance update modal
- Autosubmit mailing list confirmation
## [0.142.0] - 2026-03-12
### Added
- Support for mermaid in markdown
### Fixed
- Account activation redirection flow improved
- Compliance updates improvements: display, public
## [0.141.0] - 2026-03-11
### Added
- Add compliance page mailing list
## [0.140.0] - 2026-03-11
### Added
- Support for MS SCIM and Google bridge update
- Account activation flow from document signing request email link
### Changed
- CI improvements
- Removal of unused table and columns
- Removed adhoc token authentication for document signing and related pages
## [0.139.0] - 2026-03-11
### Added
- Add social links on compliance page
### Changed
- Fix person update
### Fixed
- Update vendor compliance report UI
## [0.138.2] - 2026-03-10
### Fixed
- Profiles filter should filter user with console/employee membership by default in console/employee APIs
## [0.138.1] - 2026-03-10
### Changed
- CP framework badges name display
## [0.138.0] - 2026-03-10
### Changed
- Improve mailer performance
### Fixed
- Display empty state for soa control assessment
- Fix compliance report
## [0.137.3] - 2026-03-05
### Fixed
- Fix trust center access SQL queries SELECT clauses
## [0.137.2] - 2026-03-05
### Fixed
- Compliance page full name unified handling through identities and profiles
## [0.137.1] - 2026-03-05
### Fixed
- Compliance page request all callback page refresh
## [0.137.0] - 2026-03-04
### Added
- Compliance page frameworks ordering and display toggling
### Fixed
- Cmopliance page connect redirection fix for existing identities
## [0.136.0] - 2026-03-04
### Added
- continue URLs for compliance page for better access request flow
- enforce NDA signature with explicit API error catched in error boundary
### Changed
- framework display name on compliange page org sidebar
## [0.135.1] - 2026-03-03
### Fixed
- fix: add trust-center config section to entrypoint.sh
## [0.135.0] - 2026-03-03
### Added
- Add delete vendor tool on mcp
## [0.134.3] - 2026-03-03
### Fixed
- Use default filter with no snapshot for mcp
## [0.134.2] - 2026-03-02
### Fixed
- Fix CVEs by updating go and open telemetry
## [0.134.1] - 2026-03-02
### Fixed
- Fix n8n get many organizations
## [0.134.0] - 2026-02-27
### Added
- Display audit name in compliance page
- Add obligation webhooks
- Add user webhooks
## [0.133.0] - 2026-02-26
### Added
- Add mcp control links
## [0.132.0] - 2026-02-25
### Added
- Add vendor risk assessment to mcp
- Add risk and measure mcp tools
### Fixed
- Fix long pdf exports
## [0.131.2] - 2026-02-24
### Fixed
- Fix mcp list tools returns badly encoded jsonschema
- Fix compliance page show unpblished document title
- Fix compliace page show unpublished document
## [0.131.1] - 2026-02-23
### Fixed
- Fix infinit redirect when NDA not configured
## [0.131.0] - 2026-02-23
### Added
- Add SOA MCP tools
- Electronic signature for compliace page NDA
- Add vendor contacts to n8n
- Add soa risk assement via document
- Allow more permissive bracket validations
### Fixed
- Fix n8n get many organization 4xx errors
- Fix auditor access to people
- Fix no link button when list is empty
- Fix obligation type not updated
## [0.130.3] - 2026-02-20
### Fixed
- Add mcp bearer header
## [0.130.2] - 2026-02-20
### Fixed
- Fix MCP authentication error
## [0.130.1] - 2026-02-20
### Fixed
- CreateUser sets profile EmailAddress field
- Invitation GraphQL type fix: remove organization & user fields
## [0.130.0] - 2026-02-20
### Added
- Add processing activities to mcp
## [0.129.3] - 2026-02-19
### Fixed
- Console org dropdown query
## [0.129.2] - 2026-02-19
### Added
- Add access to SOA for auditor
## [0.129.1] - 2026-02-19
### Fixed
- Do not display inactive profiles on iam home page
- Fix profile update additional email addresses coalesce missing
## [0.129.0] - 2026-02-19
### Added
- n8n operations for users (profiles)
- MCP operations for users (profiles)
- SCIM user title synchronization
### Changed
- Dropped minio in favor of seaweedFS
- Profile data model linked to org and identity instead of membership
- Moved state and source on profiles instead of memberships
- Refactored invitations into account activations
## [0.128.0] - 2026-02-17
### Added
- Add audit n8n nodes
- Add delete measure to mcp
## [0.127.1] - 2026-02-17
### Changed
- Remove deprecated SOA
## [0.127.0] - 2026-02-17
### Changed
- Change single document owner to multiple approvers
## [0.126.1] - 2026-02-16
### Added
- Add delete tasks to mcp
## [0.126.0] - 2026-02-16
### Fixed
- Fix deployment
## [0.125.0] - 2026-02-16
### Added
- Add delete risks to mcp
- Add meetings to mcp
## [0.124.3] - 2026-02-16
### Fixed
- Fix missing risk validations
## [0.124.2] - 2026-02-16
### Fixed
- Display control description
- Change download button text while loading in compliance page
## [0.124.1] - 2026-02-16
### Fixed
- Fix control order in SOA
- Fix saml subject not populated
## [0.124.0] - 2026-02-13
### Added
- Add webhooks
## [0.123.3] - 2026-02-13
### Fixed
- Fix missing name id format for idp initiated SAML request
## [0.123.2] - 2026-02-13
### Fixed
- Fix SAML subject must not be updated
- Fix SAML subject not set on first login
## [0.123.1] - 2026-02-13
### Fixed
- Fix missing NameID format information in SAML metadata
## [0.123.0] - 2026-02-12
### Changed
- Upgrade Postgres to 18.1
- IAM: Migrate people into profiles
## [0.122.0] - 2026-02-12
### Added
- Redirect to previous location on authentication or assumption needed
## [0.121.1] - 2026-02-11
### Fixed
- Fix Google Workspace SCIM bridge does not set active state at creation
- Fix compliance page access request was not active by default
- Fix compliance page request access add non request file to the requested one
### Security
- Update javascript dependencies
## [0.121.0] - 2026-02-10
### Added
- Add user exclusion management to the Google Workspace bridge
### Changed
- Improve compliance page access management UX
### Fixed
- Remove noisy error log from slack queue message
## [0.120.0] - 2026-02-09
### Added
- Suport all vendors fields on mcp
### Fixed
- Fix duplicate assessments
## [0.119.1] - 2026-02-09
### Security
- Upgrade go to 1.25.7
## [0.119.0] - 2026-02-05
### Added
- Add member n8n actions
### Fixed
- Fix controls for CFR framework
- Fix missing `trace_id` on resolver logs
## [0.118.2] - 2026-02-05
### Fixed
- Noisy TLS errors are filtered from logs
- Use s3 presigned URLs for email assets
### Changed
- Safer docker ubuntu image version with digest
- Safer github actions versions with digest
- Redirect already authenticated user on compliance page home when trying to log in
## [0.118.1] - 2026-02-04
### Fixed
- Fix column reference "full_name" is ambiguous
## [0.118.0] - 2026-02-04
### Added
- Add HDS framework
- Add 21 CFR Part 11 framework
### Changed
- Serve email static assets from object store
- Rework the UI of vendor row on compliance page
- Update auth layout on console and compliance page to remove right panel
### Fixed
- Fix create organization node
### Security
- Fix npm vulnerabilities
## [0.117.3] - 2026-02-03
### Fixed
- Fix n8n node cannot fetch many organizations.
- Fix SCIM disable all non SCIM members.
## [0.117.2] - 2026-02-02
### Fixed
- Missing logo
- Static handler cache headers handling
## [0.117.1] - 2026-02-02
### Changed
- Use svg for slack logo
### Fixed
- Missing google logo
- Missing relay generated files
## [0.117.0] - 2026-02-02
### Added
- Google Workspace to SCIM bridge
- Compliance page logo branding
### Fixed
- Memberships page conditional display of search input
### Security
- Upgrade go dependencies
## [0.116.15] - 2026-01-31
### Fixed
- Console slack connection placeholder display fix
## [0.116.14] - 2026-01-30
### Fixed
- Slack compliance page access display name empty case
- Compliance page API file access check fix + granular error handling
### Security
- Upgrade go to 1.25.6
## [0.116.13] - 2026-01-30
### Fixed
- Misplaced dependabot.yaml file is making CI fail
## [0.116.12] - 2026-01-29
### Changed
- Do not display trust center subprocessors tab when there are none
- Remove query params from compliange page sidebar website displayed URLs
- Refactor trust center pages to make them more maintainable
- Rename Trust Center to Compliance Page on displayed wording
- Compliance page vite dev server proxies graphQL API calls to go server port
### Fixed
- Add noreferrer noopener to compliance page open link from console
## [0.116.11] - 2026-01-27
### Added
- CI Test analytics with junit results format
- CI performance improvements with caching
- Extend dependabot to all dependencies
### Fixed
- AWS path style s3 option for Docker image entrypoint
- Console signatures counts
- Console signatures requests notifications
## [0.116.10] - 2026-01-23
### Added
- New up to date linting rules for TS codebase
### Changed
- Refactor SOA
- Dropped prettier
- Updated eslint related dependencies
- Ignore new TLS errors in logs
### Fixed
- otel utf8 errors
## [0.116.9] - 2026-01-21
### Fixed
- Document signing authentication is still done with token
- SOA permissions handling + tenant scoping
## [0.116.8] - 2026-01-20
### Changed
- Revert revert console graphql endpoint
## [0.116.7] - 2026-01-20
### Fixed
- n8n app calls by reverting console graphql endpoint
## [0.116.6] - 2026-01-20
### Fixed
- n8n http request options URL
## [0.116.5] - 2026-01-20
### Fixed
- Console invitationResolver.Organization authorize check
## [0.116.4] - 2026-01-19
### Changed
- Clean child sessions in IAM memberships migration
## [0.116.3] - 2026-01-19
### Fixed
- IAM memberships migration for entity ID
## [0.116.2] - 2026-01-19
### Changed
- Membership Profile authz done from membership in membershipResolver (it's a 1:1 association)
- Match keycloak URL ports with default base URL one for local dev
- Drop the authentication dialog in favor of a dedicated auth page for compliance page
- Order memberships by organization name on console / and memberships dropdown
- Update kit
### Fixed
- Missing console react-pdf dependency in package.json
- On sign out, clear cookie along with the existing session expiration
- Remove conditional rendering of org search input on console
- Fix organizations page layout vertical alignment
## [0.116.1] - 2026-01-18
### Fixed
- 5xx on profile loading.
## [0.116.0] - 2026-01-18
### BREAKING CHANGES
- API keys generated with previous versions are no longer compatible.
### Added
- Add SCIM provisioning support.
- Add magic link authentication.
- Add membership disable state.
- Add ABAC policy.
### Changed
- Filter junk HTTP TLS server errors.
- Change API token format.
- Add session support to compliance page.
### Fixed
- Fix overly strict obligation validation.
## [0.115.0] - 2026-01-15
### Added
- Add processing activity exports
## [0.114.0] - 2026-01-15
### Added
- Add proxy protocol v2 support.
## [0.113.0] - 2026-01-15
### Added
- Add right requests
## [0.112.4] - 2026-01-12
### Fixed
- Fix people in mcp
- Fix task display
## [0.112.3] - 2026-01-05
### Fixed
- Fix code blocks in documents
- Fix cancel signature permissions
## [0.112.2] - 2025-12-31
### Fixed
- Fix people deletion
## [0.112.1] - 2025-12-31
### Changed
- Change minutes max length
## [0.112.0] - 2025-12-22
### Added
- Add new GDPR registries
### Fixed
- Create Slack notification when updating trust center access if no existing message found
## [0.111.2] - 2025-12-19
### Fixed
- Fix trust center nil pointer dereference
## [0.111.1] - 2025-12-19
### Fixed
- Console: framework logo import
## [0.111.0] - 2025-12-18
### Added
- Add ISO 27701 (2025) framework.
- Add ISO 42001 (2023) framework.
- Add GDPR framework.
- Add CCPA framework.
- Add NIS2 framework.
- Add DORA framework.
## [0.110.2] - 2025-12-17
### Fixed
- Fix azure blob storage
## [0.110.1] - 2025-12-17
### Fixed
- Frameworks logo SVG colors
- Framework name displayed in trust center org sidebar
## [0.110.0] - 2025-12-17
### Added
- Add risk vendor risk assesments to n8n
## [0.109.0] - 2025-12-16
### Added
- Add organization filtering
- Use in-house logos when importing framework
### Fixed
- Unblock ACME provision queue on error
- GQLGen version handling with go tool
- Fix GraphQL types
## [0.108.0] - 2025-12-15
### Added
- Blacklist emails from trust requests
### Fixed
- ACME cert renewing
## [0.107.1] - 2025-12-15
### Fixed
- Fix infinit loop when renew ACME TLS certificate.
## [0.107.0] - 2025-12-15
### Added
- Add service to vendor on n8n
## [0.106.0] - 2025-12-12
### Added
- Add auditor role
### Fix
- Fix the “no change” error display in documents bulk update
- Update the front end after a document is published
## [0.105.0] - 2025-12-11
### Added
- Update trust center access slack message on console actions
## [0.104.0] - 2025-12-11
### Added
- Add risk management to N8N
## [0.103.0] - 2025-12-11
### Added
- Reject/Revoke trust center document accesses via slack app or console
## [0.102.0] - 2025-12-10
### Added
- New mime types for truct center files
## [0.101.1] - 2025-12-10
### Fix
- Fix missing validation on relation existence
- Fix permissions for trust center access
## [0.101.0] - 2025-12-10
### Added
- Enable svg support for company logos
## [0.100.0] - 2025-12-09
### Changed
- Allow non conformities without audit
### Fix
- Fix audit and framework deletion
- Make employee role assignable
## [0.99.0] - 2025-12-09
### Added
- Add employee page
- Add people management to N8N
### Fixed
- Fix invations never deleted when organization is deleted.
- Fix otel network error locally.
### Security
- Update kit.
## [0.98.1] - 2025-12-04
### Fixed
- Missing organization_id on Report
- ESLint issues
## [0.98.0] - 2025-12-03
### Added
- Add n8n vendor operations.
### Fixed
- Fix n8n node always returns success.
### Security
- Upgrade golang to 1.25.5
## [0.97.0] - 2025-12-02
### Added
- @probo/node-n8n-probo Meeting operations
### Fixed
- Console permissions initialisation
- Probod dev config values
## [0.96.1] - 2025-12-02
### Fixed
- Fix missing n8n placeholder.
## [0.96.0] - 2025-12-02
### Added
- Add n8n-node package.
## [0.95.0] - 2025-12-02
### Added
- New UI EditableTable component + implementation on assets page.
## [0.94.2] - 2025-11-27
### Fixed
- Fix missing compliance page permission again.
## [0.94.1] - 2025-11-27
### Fixed
- Fix missing compliance page permission.
## [0.94.0] - 2025-11-26
### Added
- Add updatePeople MCP tool.
- Add `SMTP_USER` and `SMTP_PASSWORD` to entrypoint.sh.
### Fixed
- MCP permission tools.
## [0.93.0] - 2025-11-25
### Added
- Add document MCP tools.
- Add document version MCP tools.
- Add document version signature MCP tools.
- Add MCP tools annotation hints.
## [0.92.0] - 2025-11-24
### Added
- Add snapshot MCP tools.
- Add task MCP tools.
- Add control MCP tools.
- Add control mapping MCP tools.
### Fixed
- Fix 5xx on vendor snapshot.
## [0.91.0] - 2025-11-24
### Added
- Add audit MCP tools.
### Fixed
- Fix 5xx when create vendor snapshot.
- Fix compliance page http to https redirect.
- Fix cannot create continious improvment via MCP.
## [0.90.1] - 2025-11-23
### Fixed
- Fix missing permission to delete custom domain.
## [0.90.0] - 2025-11-23
### Added
- MCP tools for many new objects.
### Fixed
- HTTP to HTTPS redirect for trust center.
## [0.89.1] - 2025-11-21
### Fixed
- MCP client always lost their session.
## [0.89.0] - 2025-11-21
### Added
- New MCP tools.
## [0.88.8] - 2025-11-20
- Fix SAML entrypoint config.
- Fix missing permission to verify SAML domain.
### Changed
- Update go dependencies
## [0.88.7] - 2025-11-19
### Fixed
- Fix snapshot creation
## [0.88.6] - 2025-11-18
### Fixed
- Fix asset permissions
## [0.88.5] - 2025-11-17
### Fixed
- Fix invitation permissions
## [0.88.4] - 2025-11-14
### Fixed
- Fix ca-cert-bundle entrypoint.sh
## [0.88.3] - 2025-11-14
### Fixed
- Fix document permissions
## [0.88.2] - 2025-11-14
### Fixed
- Fix missing healthcheck for postgres docker compose prod.
- Fix missing `AUTH_COOKIE_SECURE` support in entrypoint.sh.
## [0.88.1] - 2025-14-07
## Fixed
- Fix support PostgreSQL CA bundle in Helm charts with file path option
## [0.88.0] - 2025-11-13
### Added
- Add role management.
- Enable IdP-initiated SAML
### Changed
- API keys now have access to the organization they just created.
## [0.87.0] - 2025-11-13
### Added
- Add beta MCP server.
- Add official Kubernetes HEML chart.
- Add SAML IDP initiated flow support.
- Add meeting object.
### Changed
- SAML role is not mandatory anymore.
## [0.86.4] - 2025-11-07
### Fixed
- Test a fix of the deletion freeze
## [0.86.3] - 2025-11-07
### Fixed
- Fix document validations
## [0.86.2] - 2025-11-06
### Fixed
- Fix vendor url validations
## [0.86.1] - 2025-11-06
### Fixed
- Fix vendor validations
## [0.86.0] - 2025-11-06
### Added
- Add field validation system
## [0.85.0] - 2025-11-04
### Changed
- Make secure cookie configurable
## [0.84.0] - 2025-11-04
### Added
- Update documentation
### Fixed
- Fix download button in pdf preview
## [0.83.0] - 2025-10-31
### Added
- Add clearer error messages
### Fixed
- Fix organization creation
- Fix organization display order
## [0.82.0] - 2025-10-31
### Added
- Add SAML support
- Add vendors to processing activities
## [0.81.0] - 2025-10-29
### Added
- Add custom order ranking to trust center references
## [0.80.2] - 2025-10-28
### Fixed
- Fix create report access query
## [0.80.1] - 2025-10-28
### Fixed
- Fix report list in trust center update access modal
## [0.80.0] - 2025-10-28
### Changed
- Change trust center console UX/UI
## [0.79.0] - 2025-10-28
### Added
- Add trust center files
### Fixed
- Fix HTML entities displaying incorrectly in PDF exports (e.g., "&" showing as "&amp;")
## [0.78.0] - 2025-10-23
### Added
- Add slack integration for trust center access management
### Changed
- Markdown links now open in new tab with security attributes
## [0.77.0] - 2025-10-23
### Added
- Add invitation filtering by multiple states (PENDING/ACCEPTED/EXPIRED)
### Changed
- Settings page now shows only pending and expired invitations (accepted invitations are hidden)
### Fixed
- Fix document classification not being passed when creating documents
- Fix document classification changes not syncing to draft versions
- Fix organization invitations filter not being applied at database level
## [0.76.0] - 2025-10-22
### Added
- Add customizable document classification
## [0.75.1] - 2025-10-22
### Fixed
- Invitation status not updated on the UI
- Inconsistent updates of nullable values
## [0.75.0] - 2025-10-21
### Added
- Add signature filtering by state (REQUESTED/SIGNED) on document signatures tab
- Add HTTP to HTTPS redirect for custom domain 404 pages
### Changed
- Optimize document PDF export signature loading with single query instead of N+1 queries
## [0.74.7] - 2025-10-20
### Fixed
- Fix compliance website wording
## [0.74.6] - 2025-10-20
### Fixed
- Fix ordered list display in documents
- Fix 5xx on risk measures resolver
## [0.74.5] - 2025-10-16
### Fixed
- Broken document scroll when document list unfollded
## [0.74.4] - 2025-10-15
### Fixed
- React pdf race condition
## [0.74.3] - 2025-10-15
### Changed
- Increase signature link period from 7 days to 30 days
## [0.74.2] - 2025-10-15
### Fixed
- Not all signature are visible
## [0.74.1] - 2025-10-15
### Changed
- Use hosted png for logo in emails
## [0.74.0] - 2025-10-15
### Fixed
- Fix audit update in trust center settings
### Changed
- New signatures page design
- New emails design
## [0.73.1] - 2025-10-15
### Fixed
- Fix organization logo update
## [0.73.0] - 2025-10-14
### Added
- Add invitation management
- Bootstrap role management
### Changed
- Refactor of authentication and authorization
## [0.72.0] - 2025-10-14
### Added
- Add retry tracking for certificate provisioning and renewal.
- Add automatic cleanup of stale provisioning attempts (4+ hours old)
- Add max retry limit (3 attempts) before marking domains as failed
- Add distinction between fatal and transient ACME errors
### Changed
- Silently reject TLS connections without SNI (health checks, scanners)
### Fixed
- Fix stale certificate provisioning attempts blocking the queue
## [0.71.0] - 2025-10-14
### Fixed
- Fix SQL measure queries
### Changed
- Remove trust center slug config UI
- Add EU as possible contry code for vendor
## [0.70.0] - 2025-10-14
### Added
- Add horizontal logo to documents
### Fixed
- Fix file download Content-Disposition header format
## [0.69.0] - 2025-10-13
### Added
- Add document version on document list
- Add procedure document type
- Allow to filter measures by state
### Changed
- Support ID-based trust center URLs with slug fallback
- Show custom domain URL on trust center page when configured
- Update framework icons
### Removed
- Remove verifiedAt field from CustomDomain
- Remove criticity on assets
## [0.68.3] - 2025-10-11
### Fixed
- Fix trust center design on custom domain
- Send trust center invitation with custom domain when available
- Fix evidence deletion
- Fix dead ACME challenge
## [0.68.2] - 2025-10-10
### Added
- Socket binding for trust center
## [0.68.1] - 2025-10-09
### Fixed
- Fix filename content type regression
- Add missing permission to binary in docker image
## [0.68.0] - 2025-10-09
### Added
- Add custom domain to trust centers
## [0.67.2] - 2025-10-09
### Fixed
- Fix vendor compliance reports files migration
## [0.67.1] - 2025-10-09
### Fixed
- Fix evidence files migration
## [0.67.0] - 2025-10-09
## Changed
- Store all file data in one table
### Fixed
- Display more measures and tasks
# [0.66.1] - 2025-10-06
### Fixed
- Fix access to public documents for unauthenticated users
# [0.66.0] - 2025-10-06
### Added
- Store id of accepted nda
- Add public documents on trust centers
## Changed
- Allow missing NDA
### Fixed
- Fix trust center v2 design
# [0.65.1] - 2025-10-03
### Fixed
- Restrict deletion of users who have assets
# [0.65.0] - 2025-10-03
### Added
- Add access by document on trust center
- Add ordering measures by name in the API
### Fixed
- Fix resetting state during measure editing
- Handle document mapping conflict error
# [0.64.1] - 2025-09-30
### Fixed
- Remove document description and footer in template
# [0.64.0] - 2025-09-30
### Added
- Add trust center v2
- Add optional watermark and signatures in pdf export
### Changed
- Remove description from pdf export
# [0.63.1] - 2025-09-26
### Fixed
- Fix request document signature
# [0.63.0] - 2025-09-25
### Changed
- Allow `.csv` file as evidences.
- Remove section id from obligations
- Change obligations status enum
### Added
- Add link between obligations and risks
# [0.62.0] - 2025-09-24
### Added
- Add reference companies for trust center trusted by section
### Fixed
- Fix watermark display in trust center
# [0.61.1] - 2025-09-23
### Added
- Display countries on trust centers
# [0.61.0] - 2025-09-23
### Added
- Decouple users from people
- Add more details to organization
# [0.60.0] - 2025-09-18
### Added
- Add bulk export documents
- Add bulk delete documents
- Display risk description
- Uniformize date diplay
- Add risk order by owner full name
# [0.59.1] - 2025-09-16
### Fixed
- Build trust center in the make file
# [0.59.0] - 2025-09-16
### Added
- Add nda to trust centers
- Add confidential watermark to trust center documents
- Add countries to vendors
### Fixed
- Add category back to vendors
# [0.58.4] - 2025-09-12
### Fixed
- Fix framework export email
## [0.58.3] - 2025-09-12
### Fixed
- Fix release workflow
## [0.58.2] - 2025-09-12
### Added
- Send framework export by email
- Order organization by name
## [0.58.1] - 2025-09-10
### Chore
- Rename registries
## [0.58.0] - 2025-09-08
### Added
- Soft delete documents
- Store sidebar state
## [0.57.1] - 2025-09-04
### Fixed
- Fix framework export for evidence link
## [0.57.0] - 2025-09-04
### Added
- Add framework exports
## [0.56.0] - 2025-09-03
### Added
- Add risks snapshots
### Fixed
- Fix tabs counter
- Fix password page redirection
## [0.55.0] - 2025-09-01
### Added
- Add vendor snapshots
### Fixed
- Fix document deletion and update errors
- Remove signature block from trust center documents
- Fix non mandatory fields on vendor
## [0.54.0] - 2025-09-01
### Added
- Add compliance registry snapshots
- Add continual improvement snapshots
- Add processing activity registry snapshots
- Add assets snapshots
## [0.53.0] - 2025-08-29
### Added
- Add processing activity registries
- Add continual improvement registries
- Add noncoformity registry snapshots
### Fixed
- Probo instance allow crawling bot to index.
## [0.52.0] - 2025-08-27
### Added
- Add data snapshot
## [0.51.1] - 2025-08-23
### Fixed
- Fix query loops in public trust center
- Fix button display when disconected in public trust center
## [0.51.0] - 2025-08-22
### Added
- Add trust center access requests
## [0.50.1] - 2025-08-21
### Fixed
- Fix authentification token error
## [0.50.0] - 2025-08-21
### Added
- Add compliance registries
- Add vendor services
### Chore
- Replace mailhog
## [0.49.0] - 2025-08-20
### Added
- Add nonconformity registries
### Fixed
- Fix trust center dark mode
## [0.48.1] - 2025-08-14
### Fixed
- Fix display of download buttons in the public trust center
## [0.48.0] - 2025-08-14
### Added
- Add baa to vendors
- Add dpa to vendors
- Add contacts to vendors
- Add name to audits
- Add audits to controls
## [0.47.0] - 2025-08-13
### Added
- Add document draft deletion
- People now have contract start and end dates in the UI and API.
- Lists can filter out people whose contracts have ended.
### Fixed
- Fix closing of document deletion pop up
- Fix creation of empty draft without save
## [0.46.2] - 2025-08-10
### Fixed
- Fix various SQL queries failures due to trust center
- Fix internal information leaking to API
## [0.46.1] - 2025-08-10
### Fixed
- 5xx on risk show page
## [0.46.0] - 2025-08-08
### Added
- Add organization deletion
- Add Probo by default
## [0.45.1] - 2025-08-06
### Fixed
- Fix data page display
## [0.45.0] - 2025-08-06
### Added
- Add trust center
- Add edition of document fields
## [0.44.0] - 2025-07-23
### Fixed
- Fix PDF tables
- Fix display issue on control and framework
- Fix control creation
## [0.43.1] - 2025-07-22
### Fixed
- Fix document draft creation
## [0.43.0] - 2025-07-21
### Added
- Add control exclusion
### Fixed
- Fix small issues on SOA
## [0.42.1] - 2025-07-16
### Fixed
- Fix missing document download button
## [0.42.0] - 2025-07-16
### Fixed
- Fix document version selector
- Fix duplicate people
## [0.41.0] - 2025-07-16
### Changed
- Revision of multiple UI elements
### Added
- Add document version selector on details page
- Add document bulk publication
- Add document bulk signature request
- Add cancel signature request
## [0.40.0] - 2025-07-11
### Added
- Add cancel request mutation
- Add bulk publish document version mutation
- Add bulk request signature mutation
## [0.39.0] - 2025-06-03
### Added
- Add policy PDF export
### Security
- Update go dependencies
- Update node dependencies
## [0.38.1] - 2025-07-03
### Fixed
- Fix 5xx on document type order
## [0.38.0] - 2025-07-03
### Added
- Allow to change doucment order in the UI
### Change
- Change default document sorting order
## [0.37.5] - 2025-06-30
### Fixed
- Fix missing risk score on detail risk page
- Fix matrix risk score color on risk matrix
## [0.37.4] - 2025-06-30
### Fixed
- Fix SOA with risk
## [0.37.3] - 2025-06-30
### Fixed
- Fix missing framework controls
## [0.37.2] - 2025-06-30
### Changed
- Generate excel in memory instead of using fs
## [0.37.1] - 2025-06-30
### Added
- Add updated at and created at order for vendor
### Fixed
- Fix SOA filename
## [0.37.0] - 2025-06-30
### Added
- Add SOA generator
- Show last assessment date
## [0.36.0] - 2025-06-29
### Added
- Add URI evidence type
- Add link dialog for measure evidences
- Add default security header to API
- Add support for extra header
### Fixed
- Fix tasks deadline
- Fix order people by kind
- Fix missing people role order
### Security
- Remove all data after logout
- Enforce maximum password limit
- Mitigate timing attack on signin
### Changed
- Use httplogger on GraphQL error
- Returns internal error when error is known
## [0.35.0] - 2025-06-20
### Added
- Add forgot password pages
## [0.34.0] - 2025-06-17
### Added
- Pagination for people, vendors, documents, data and assets
### Fixed
- Fix 404 on email confirmation page
- Fix 404 on invitation confirmation page
- Fix login redirection
- Fix form not reset after submit
## [0.33.6] - 2025-06-15
### Fixed
- Fix filedrop upload too small file size
## [0.33.5] - 2025-06-14
### Fixed
- Fix framework view too many queries
- Fix image upload failed
## [0.33.4] - 2025-06-13
- Fix measure count
## [0.33.3] - 2025-06-13
### Fixed
- Fix 5xx on document count for risk
- Fix leaking pg connections
## [0.33.2] - 2025-06-13
### Fixed
- Fix API path contain undefined
## [0.33.1] - 2025-06-13
### Fixed
- Fix localhost enforce at build time
## [0.33.0] - 2025-06-13
### Added
- Add backend fulltext search on controls, documents, risks and measures
- Add `totalCount` field in `Connection` object
- New console design
### Fixed
- Use new enum for data classification
## [0.32.0] - 2025-06-07
### Changed
- Prevent publishing of document versions with no changes
- Update AI prompt used for changelog generation
### Added
- Add deadline on tasks
- Add controls manual create, update, and delete
## [0.31.0] - 2025-06-04
### Added
- Add assets inventory
- Add data inventory
- Add title and owner id to document versions
- Add automatic changelog
## [0.30.1] - 2025-06-02
### Added
- Added sort key `updated_at` for vendors
### Fixed
- Fix 5xx on signature request
- Fix sort key 5xx
## [0.30.0] - 2025-05-31
### Changed
- Change policies to documents
### Added
- Add type to documents
### Fixed
- Fix HIPAA import
## [0.29.0] - 2025-05-29
### Added
- HIPAA releated risks
- Add framework import from json
### Changed
- New add vendor UI
### Fixed
- Add url input type for vendor assessement
## [0.28.0] - 2025-05-29
### Added
- Add automatic vendor assessment
- Add vendor category fields
- Add vendor business associate agreement url and subprocessors list url
### Fixed
- Fix 5xx when create new vendor
- Fix 5xx when update a vendor
## [0.27.1] - 2025-05-25
### Fixed
- Fix missing `position` field migration
## [0.27.0] - 2025-05-25
### Changed
- Rename severity into risk score
- Add contract dates fields
- Add people position field
### Fixed
- Fix conflict http header fields
### [0.26.0] - 2025-05-20
### Added
- Add docker image security scan
- Show latest risk updated date
- Log error when GraphQL resolver failed
### Security
- Update Golang dependencies
- Update to latest Ubuntu LTS
- Update to latest Golang version
### [0.25.0] - 2025-05-13
### Changed
- Allow data and text file for evidences
### Fixed
- Fix missing people when inviting user already in other organization
- Fix cannot upload organization logo
### [0.24.0] - 2025-05-06
### Added
- Task page list
### Changed
- Task is now linked to organization
### Fixed
- Fix cannot see vendor assessment note
### Security
- Add filetype validation for end-user upload
## [0.23.1] - 2025-05-04
### Fixed
- Fix http cache etag
- Fix cannot delete measure
## [0.23.0] - 2025-05-04
### Added
- Add ISO 27001 document header
- Add policy downlaod
### Changed
- Enable HTML support in Markdown renderer
## [0.22.0] - 2025-05-04
### Added
- Show owner of the policy in list
- Show number of singatures in the policy list
### Changed
- Link evidences to measure
## [0.21.0] - 2025-05-01
### Changed
- Add markdown table support
- Explicit risk score calcul
## [0.20.1] - 2025-05-01
### Changed
- New vendors in the built-in lists
## [0.20.0] - 2025-05-01
### Added
- Add end-user confirmation before sending policy sign notification
- Add assessed at in the vendor list
### Fixed
- Fix not aligned button on policy list view
### Removed
- Remove start and end service date of vendor
## [0.19.2] - 2025-05-01
### Fixed
- Fix 5xx when invite user in an organization
## [0.19.1] - 2025-05-01
### Fixed
- Evidence URL not set
## [0.19.0] - 2025-04-30
### Changed
- New vendors in the built-in lists
### Security
- Update javascript dependencies
- Fix open redirect when the redirect url use `//`
## [0.18.1] - 2025-04-30
### Fixed
Fix typo `mesure` instead of `measure`
## [0.18.0] - 2025-04-30
### Added
- Static files are served using GZip
- Static fiels are served with ETag and Cache header fields
### Fixed
- Entrypoint JS/CSS has no chunk hash
## [0.17.0] = 2025-04-29
### Added
- Add policy unlogged sign
## [0.16.0] = 2025-04-29
### Added
- Policy history
- Policy signature
- New vendors in the built-in lists
### Fixed
- Fix cannot delete measure with linked risk
## [0.15.1] - 2025-04-27
### Fixed
- Fix SQL syntax error
## [0.15.0] - 2025-04-27
### Added
- Add delete measure in the UI and GraphQL API
### Removed
- Remove `importance` field from measure as it's not used anymore
### Fixed
- Fix delete evidence from task list does not work
- Fix cannot load attached measure risks
## [0.14.0] - 2025-04-24
### Added
- Risk can have note
- Cache static assets
## [0.13.2] - 2025-04-24
### Fixed
- Fix psql `generated_gid` returns padded base64
- Fix `user_id` not set when create new organization
- Fix `additional_email_addresses` not set when invite in organization
## [0.13.0] - 2025-04-23
### Added
- New "Risk assessments" tab for vendors that allows you to:
- View all risk assessments for a vendor in one place
- Create new risk assessments with data sensitivity and business impact ratings
- Track assessment expiration dates
- Automatic people record creation when accepting invitations
- New vendors in the built-in lists
- Introduced a connector framework enabling integration with external
services:
- Add OAuth2 connector implementation
### Changed
- Completely redesigned vendor list page
- Completely redesigned vendor detail page
- Improved compliance reports table with better file size formatting and date display
- People may be linked to user
## [0.12.0] - 2025-04-20
### Added
- New vendors in the built-in lists
### Changed
- Update risk library with new risks
### Security
- Upgrade Golang dependencies
- Upgrade Node dependencies
## [0.11.1] - 2025-04-15
### Changed
- New vendors in the built-in vendors list
## [0.11.0] - 2025-04-15
### Added
- New vendors in the built-in vendors list
### Changed
- More explicit scale, legend and score for risk matrix
## [0.10.1] - 2025-04-14
### Fixed
- Fix grammar for "people" in the navigation bar
- Fix editor change cursor position at each keystroke
- Fix editor does not display list icon
## [0.10.0] - 2025-04-14
### Changed
- Improve UI of the risk matrix
- Rename "Mitigation" in "Mesure"
## [0.9.0] - 2025-04-12
### Added
- Added business owner and security owner fields to vendors
### Changed
- Improved vendor detail page with organized sections
- Split information into logical sections (Basic Information, Ownership, Risk & Service, Documentation)
- Better visual organization of vendor information
## [0.8.0] - 2025-04-12
### Added
- New risk treatment strategy options: Mitigate, Accept, Avoid, Transfer
- Risk ownership functionality
## [0.7.0] - 2025-04-12
### Added
- Enhanced risk management with inherent and residual risk assessment capabilities
- Added new fields to track both inherent and residual likelihood/impact values
- Introduced risk severity calculation as the product of likelihood and impact
- Added visual risk matrix to view risk distribution by severity
- New risk-policy mapping functionality allowing risks to be linked to policies
- New risk-control mapping functionality enabling risks to be linked to controls
- Added edit functionality for risks with a new edit page
- New popover components for mitigation information on the mitigations list view
- Pre-populated risk templates from a JSON data source
### Changed
- Update vendors catalog.
- Updated risk creation form to include both inherent and residual risk parameters
- Improved risk list view with risk matrix visualization
- Enhanced breadcrumb navigation for risk detail pages
- Refactored risk-mitigation mapping to remove redundant probability/impact fields
- Renamed probability field to likelihood for better alignment with risk management terminology
### Fixed
- Improved license file formatting in vendors and risks data directories
- Fixed URL in attribution text (`getprobo.com` → `www.getprobo.com`)
## [0.6.0] - 2025-04-10
### Added
- Added vendors.json data file under Creative Commons Attribution-ShareAlike 4.0 license`
- New vendor data management system with comprehensive vendor information
- Pre-populated vendor database with 12 common SaaS vendors and their certifications
- Vendor details page with extended fields for improved vendor management:
- Legal name and headquarters address
- Website URL
- Certification tracking with tag-based interface
- Links to important vendor documents (SLA, DPA, security pages)
- Support for multiple compliance certifications per vendor
### Fixed
- Fix cannot create vendor when the name is too similar to suggested one
- Fix UI showing double button to close evidence preview modal
- Fix cannot delete vendor with compliance reports (added cascade delete constraint)
## [0.5.0] - 2025-04-10
### Added
- Add vendor compliance reports UI
- Controls can now be linked to policies, enabling better organization of compliance documentation and clearer traceability between policies and security controls
- New UI for viewing and managing policies related to a specific control
## [0.4.2] - 2025-04-09
### Changed
- Simplified policy data model by removing version field and optimistic concurrency
- Refactored policy update flow to load-modify-save pattern
### Fixed
- Added user-friendly error messages when importing frameworks that already exist
## [0.4.1] - 2025-04-09
### Changed
- Update ISO 27001 and SOC2 framework definition.
## [0.4.0] - 2025-04-09
### BREAKING CHANGES
- **BREAKING:** Renamed GraphQL mutations for control-mitigation mappings:
- `createControlMapping` → `createControlMitigationMapping`
- `deleteControlMapping` → `deleteControlMitigationMapping`
- Input and payload types have been updated accordingly
### Added
- Add import control <> mitigation mapping.
- Add mitigation tasks import.
- Add auto-scroll to opened category.
- Added support for mapping controls to policies:
- New GraphQL mutations `createControlPolicyMapping` and `deleteControlPolicyMapping`
- Controls can now be associated with both mitigations and policies
- New bidirectional relationships:
- Control objects now expose a `policies` field to list associated policies
- Policy objects now expose a `controls` field to list associated controls
- Added vendor compliance reports:
- New GraphQL types `VendorComplianceReport` and related connection types
- New GraphQL mutations `uploadVendorComplianceReport` and `deleteVendorComplianceReport`
- New `complianceReports` field on the Vendor type
- Support for uploading, viewing, and managing vendor compliance documentation
- Added pre-configured frameworks:
- Added ISO/IEC 27001:2022 and SOC 2 framework templates
- Improved framework import interface with dropdown menu for template selection
- Support for one-click import of standard compliance frameworks
### Changed
- Evidence can now be requested.
### Fixed
- Fix unfoldable mitigation category when open via the URI fragment.
- Fix ctrl+click on mitigation does not open new tab.
- Fix error handling in framework view when no controls are available.
## [0.3.0] - 2025-04-01
### Added
- Add sidebar to show a task.
- Add task estimate edition.
- Add control+framework auditor views.
- Add import mitigations support.
- Add import framework support.
- Add risk object management.
- Add risk template.
- Add mapping between control and risk.
### Changed
- Rename control in mitigation.
- Home page is now mitigations page.
### Fixed
- Fix panic in GraphQL resolver are not reported.
- Fix otal trace never started.
- Fix React.lazy chunck error.
- Fix login page show `unauthorized` error.
- Fix cannot delete task with evidences.
- Fix cannot download file with non-ASCII filename.
## [0.2.0] - 2025-03-24
### Added
- Add forget password.
- Allow evidence to be a link.
- Add task import support.
- Allow to create vendor when it not exist in the auto-complete.
- Add service account people kind.
### Changed
- Make task time estimate optional.
- Set invitation token to 12 hours.
- Order people by fullname.
- Order vendor by name.
- Allow to edit control state without going to edit page.
- Redirect on people list after people creation.
- New UI for the framework overview page.
### Fixed
- Fix flickering on hover on categories.
- Fix control order under a category.
- Fix UI does not refresh after importing a framework.
- Fix cannot create control.
- Fix missing include cookie on confirmation invit.
- Fix sign-in does not include cookie.
- Fix missing version when create task.
- Fix random order on framework overview.
- Fix change task state not visible on UI.
- Fix control card items alignement.
- Fix cannot delete task.
- Fix password managers misidentifying token fields as usernames in reset password and invitation confirmation forms.
## [0.1.0] - 2025-03-14
Initial release.
Reference in New Issue View Git Blame Copy Permalink